Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/MrKYo__eN1HMBruv8UuKcbqdObk.roa
File: MrKYo__eN1HMBruv8UuKcbqdObk.roa (raw, json)
Hash identifier: Ud5a3RL8grCkSSSfiaMHXATkh0Dk6EnAaYNb46rNKDE=
Subject key identifier: 32:B2:98:A3:FF:DE:37:51:CC:06:BB:AF:F1:4B:8A:71:BA:9D:39:B9
Certificate issuer: /CN=958B346FB031A83DA2F43F761FA02042D523F50D
Certificate serial: 11E8
Authority key identifier: 95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/MrKYo__eN1HMBruv8UuKcbqdObk.roa
Signing time: Fri 01 Sep 2023 09:44:32 +0000
ROA not before: Fri 01 Sep 2023 09:44:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131607
IP address blocks: 103.130.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4584 (0x11e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958B346FB031A83DA2F43F761FA02042D523F50D
Validity
Not Before: Sep 1 09:44:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=32B298A3FFDE3751CC06BBAFF14B8A71BA9D39B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:b4:33:92:d3:ec:6c:fd:3a:98:4a:b1:8e:
b3:fc:ac:b6:7e:24:8f:19:b9:e1:65:1d:b9:79:11:
ee:01:d1:28:51:e4:ed:76:04:47:57:eb:88:35:ef:
6e:57:ed:5b:e5:fa:bd:a4:00:9b:ef:e0:e9:71:bb:
e3:ea:de:6b:46:57:39:a4:9c:bc:09:2e:9a:0a:85:
c4:78:11:9d:5e:95:66:73:fc:1e:40:0d:53:c5:a2:
2a:63:ea:72:f1:b5:b5:b9:b1:83:a7:b7:dc:29:ef:
11:c0:24:06:20:82:95:8f:a9:53:ad:10:d5:a7:cb:
77:f2:0b:18:b0:a5:67:b9:07:64:f3:ff:7f:54:34:
b4:a1:e7:9a:e0:fc:10:e4:4c:fb:75:bb:97:34:99:
a3:e5:f0:41:28:5e:20:21:53:ef:72:f2:f6:27:99:
b5:9c:1c:8a:52:1a:81:98:56:8a:0a:65:04:8e:3f:
af:2a:8f:b2:d7:fd:d8:cd:2e:66:ef:41:8b:e8:85:
d7:ba:d2:d4:ac:8e:8a:66:be:26:74:f3:ea:24:9e:
b0:93:a1:56:8d:17:7c:f9:99:d8:a3:24:8b:01:1f:
f9:92:b7:53:6b:e5:eb:3f:20:36:f7:7c:20:28:75:
65:a8:4c:e5:8a:e1:ea:ab:c4:64:d6:4c:8c:2c:6c:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:98:A3:FF:DE:37:51:CC:06:BB:AF:F1:4B:8A:71:BA:9D:39:B9
X509v3 Authority Key Identifier:
keyid:95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/lYs0b7AxqD2i9D92H6AgQtUj9Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/MrKYo__eN1HMBruv8UuKcbqdObk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.0.0/22
Signature Algorithm: sha256WithRSAEncryption
62:49:07:1d:6c:15:b4:ca:05:80:46:c1:62:52:d8:fa:a2:b1:
9a:34:e0:b5:6b:04:e4:a9:9b:21:0e:7e:47:88:d0:12:00:3a:
98:1a:72:8d:7e:72:95:40:23:56:b0:10:bd:0f:2d:8e:ac:1e:
c6:aa:f0:d4:83:28:0c:16:86:55:5a:4e:df:40:50:70:ac:86:
6a:7d:8d:40:85:28:b0:e8:84:0e:ed:96:66:73:b0:31:13:cc:
4a:24:1a:e9:dd:b0:20:63:f5:85:bd:63:ee:47:08:e9:08:52:
31:38:99:a2:7c:fe:bf:50:58:dd:22:88:33:ce:7c:fc:9d:c0:
13:00:87:d0:f5:47:01:f7:3f:a5:32:4c:88:32:ff:e9:dd:90:
47:ff:9a:d2:d6:40:bf:64:50:86:be:a9:78:ec:08:d7:1e:69:
fc:06:ca:ad:69:7d:ae:05:21:c6:bb:a2:b4:df:5a:92:f1:c7:
32:5c:6e:1e:90:e6:57:6b:e4:ee:8c:34:9d:36:95:cd:f4:87:
0b:02:2e:76:b7:e6:e1:6c:6c:76:ab:63:18:5c:19:56:88:e5:
e9:87:bb:11:b6:c9:37:eb:3b:f4:c5:4f:38:e1:0a:ff:d9:98:
95:29:43:b3:68:ad:ec:ca:53:f4:f5:b3:20:f3:8d:8a:7d:a8:
b6:9b:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org